Drop the deprecated @types/libsodium-wrappers-sumo stub dependency #27

Closed
opened 2026-08-09 12:08:54 +02:00 by clawbot · 2 comments
Collaborator

Found while fixing #3; filed rather than fixed drive-by.

package.json pins "@types/libsodium-wrappers-sumo": "0.8.2" in devDependencies. That package is a deprecated stub. Its own manifest in node_modules says so:

{
    "name": "@types/libsodium-wrappers-sumo",
    "version": "0.8.2",
    "description": "Stub TypeScript definitions entry for libsodium-wrappers-sumo, which provides its own types definitions",
    "main": "",
    "deprecated": "This is a stub types definition. libsodium-wrappers-sumo provides its own type definitions, so you do not need this installed."
}

The installed directory contains only LICENSE, README.md and package.json — no .d.ts at all. The real declarations come from libsodium-wrappers-sumo itself, at dist/modules-sumo/libsodium-wrappers.d.ts, which is where StateAddress and the crypto_secretstream_* signatures actually live.

So the dependency contributes nothing but a deprecation warning on install and one more thing to keep pinned.

Definition of done

  1. @types/libsodium-wrappers-sumo removed from devDependencies, with yarn.lock regenerated to match.
  2. make build still green — this is the check that matters, since the types are only consumed at compile time and make check does not type-check.
  3. make check green.
  4. TODO.md updated in the same commit.
Found while fixing #3; filed rather than fixed drive-by. `package.json` pins `"@types/libsodium-wrappers-sumo": "0.8.2"` in `devDependencies`. That package is a deprecated stub. Its own manifest in `node_modules` says so: ```json { "name": "@types/libsodium-wrappers-sumo", "version": "0.8.2", "description": "Stub TypeScript definitions entry for libsodium-wrappers-sumo, which provides its own types definitions", "main": "", "deprecated": "This is a stub types definition. libsodium-wrappers-sumo provides its own type definitions, so you do not need this installed." } ``` The installed directory contains only `LICENSE`, `README.md` and `package.json` — no `.d.ts` at all. The real declarations come from `libsodium-wrappers-sumo` itself, at `dist/modules-sumo/libsodium-wrappers.d.ts`, which is where `StateAddress` and the `crypto_secretstream_*` signatures actually live. So the dependency contributes nothing but a deprecation warning on install and one more thing to keep pinned. ## Definition of done 1. `@types/libsodium-wrappers-sumo` removed from `devDependencies`, with `yarn.lock` regenerated to match. 2. `make build` still green — this is the check that matters, since the types are only consumed at compile time and `make check` does not type-check. 3. `make check` green. 4. `TODO.md` updated in the same commit.
Author
Collaborator

Implementer brief (branch next2)

Still live: package.json:32 pins the stub. Definition of done as in the issue body. The yarn.lock change comes only from yarn run through make bootstrap or the repo's scripts, never from a hand edit of the lockfile. If make check still does not type-check, run make build too and name both in the PR body. No other dependency changes.

Model: opus-5-5

## Implementer brief (branch `next2`) Still live: `package.json:32` pins the stub. Definition of done as in the issue body. The `yarn.lock` change comes only from `yarn` run through `make bootstrap` or the repo's scripts, never from a hand edit of the lockfile. If `make check` still does not type-check, run `make build` too and name both in the PR body. No other dependency changes. Model: opus-5-5
Author
Collaborator

Removed the stub and regenerated yarn.lock in #81.

Model: opus-5-5

Removed the stub and regenerated `yarn.lock` in https://git.eeqj.de/sneak/quak/pulls/81. Model: opus-5-5
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sneak/quak#27